Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: griz+877i6QakCprFPOL/OhY4rUws6t6yql8eRev6DI=
Subject key identifier: 70:59:10:63:F7:F6:D7:E3:F5:8C:18:76:36:0F:71:63:77:F6:4E:43
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019752A20586BA0398098B56E593EB9D2099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 03C9
Signing time: Mon 09 Jun 2025 03:00:39 +0000
Manifest this update: Mon 09 Jun 2025 03:00:39 +0000
Manifest next update: Tue 10 Jun 2025 03:00:39 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: g4QKmBJqxjNAO2ATqFEhmy8KRPtbSIKv6aWHwNHL/qc=)
2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:05:86:ba:03:98:09:8b:56:e5:93:eb:9d:20:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Jun 9 03:00:39 2025 GMT
Not After : Jun 10 03:00:39 2025 GMT
Subject: CN=70591063f7f6d7e3f58c1876360f716377f64e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:96:84:e8:82:3b:e8:92:71:8e:4d:10:6a:
1e:4a:22:d8:bc:83:4a:5f:60:ca:03:c7:c6:22:f9:
9a:ca:ca:0e:9d:f1:fb:52:c4:3c:a3:6b:83:eb:04:
a4:4b:cd:73:4a:6e:b0:1b:1c:7a:c8:73:74:20:a5:
04:c1:9e:d6:0d:c4:09:3a:e6:d9:9b:c6:86:b4:1d:
3c:b8:e8:81:d7:a6:95:d2:f2:0b:d1:27:22:31:77:
9d:28:77:b8:18:99:bb:6f:16:a8:12:de:8a:8f:ce:
e9:28:38:fa:69:13:c6:65:5e:d6:98:cf:ec:17:76:
aa:5d:b3:ad:4c:d8:fe:7d:fb:29:8a:a7:8b:16:70:
82:45:4c:74:ff:26:98:35:15:fd:6e:50:37:2e:8f:
e1:ee:3b:58:d1:47:db:1e:c7:73:94:6f:5b:56:a7:
f2:45:46:21:44:32:f0:27:39:c3:c5:0d:91:69:8e:
41:14:64:3b:ee:cf:9d:01:8a:7e:46:22:91:d3:b7:
2e:9f:a1:09:d2:7e:04:58:a0:f4:ec:c2:ab:2c:7a:
ba:ae:ff:03:76:81:15:36:e3:1a:0c:1b:9a:f1:5d:
93:0a:f6:0b:7e:ef:49:82:2f:9a:4a:84:68:cc:de:
97:bd:d9:05:e0:60:fb:07:46:fb:5e:15:07:f2:5f:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:10:63:F7:F6:D7:E3:F5:8C:18:76:36:0F:71:63:77:F6:4E:43
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f7:61:1b:1f:a6:1b:fe:29:74:00:3e:61:b4:1c:a4:f6:7e:
36:f1:6e:83:75:63:02:2b:dd:2d:a8:24:0a:f4:7c:3c:4a:c0:
1e:e6:d0:53:f9:d3:c2:22:da:6e:38:73:5e:28:25:81:ae:0a:
66:d9:8e:08:89:25:03:1d:6c:88:27:05:88:36:83:c1:94:41:
53:e5:e5:bb:41:aa:34:c2:07:25:cf:9a:b6:3f:3f:e6:32:57:
4a:5f:8a:4c:f2:34:cb:a9:ea:74:ea:5f:ae:2a:2b:3f:6d:2c:
74:16:b0:c5:48:d0:bd:21:20:24:52:4d:34:d8:ae:41:5b:01:
13:80:25:db:ad:24:cb:eb:22:ab:d3:00:82:34:28:3f:1d:c0:
b2:b7:69:a6:bf:4e:66:aa:b5:9a:af:d4:47:92:e5:7a:18:33:
9e:bc:92:66:3c:3b:31:ec:c6:e7:0a:4e:fc:f9:7d:1e:79:73:
f9:b6:83:95:5b:91:b5:3d:70:51:99:bf:41:20:a8:d1:5b:06:
27:be:52:bd:ef:59:79:0c:8d:f5:5e:b7:21:6f:ab:80:5b:80:
66:2e:74:86:d1:a9:dd:1e:f1:41:a5:a1:a8:0a:92:d5:37:dc:
d0:26:55:38:e1:2f:2a:1c:54:c6:57:3e:3e:8c:23:13:fa:f1:
31:69:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:39:23 2025 by rpki-client